90
Views
5
Comments
[DB Cleaner on Steroids] How do we implement Security on the DB Cleaner?
Question
db-cleaner-on-steroids
Web icon
Forge asset by Miguel Antunes

I know you have to initially log into Service center to access the application but what security is in place to prohibit any user who has access to Service Center from logging into the DB Cleaner and deleting records?

2023-03-30 10-13-40
Miguel Antunes

Hi Justin,

Right now it inherits the permissions from service center that's right. There are actions like dropping tables or entities attributes which requires the user to have full admin permissions over the environment.

But for logs, there's no control. One developer should be responsible for its actions.

Of course this can be changed, if we find that's a concern of multiple people.

Thanks,
Miguel

UserImage.jpg
Justin Santiago

Thanks Miguel,  yea the fact that we have no control over security makes us hesitant to install this in our Production environment.  We want the functionality the tool offers but don't want to risk a developer to go in and delete things.  Would you be able to tell us which tables the DB Cleaner purges if we wanted to write a script to run manually in Production for the Email cleanup?

UserImage.jpg
Anilkumar Baraiya

Hi  Miguel,

Same as Justin I am looking as well to use this but to restrict it for Admin only for all actions.

Is there an option available in any version ?

Thanks,

Anil.

 

UserImage.jpg
Oscar Passador

Hi all, I have the same need to be able to limit access to the application. Is there any development planned in this sense? Thanks

2018-08-04 18-19-00
André Pinho

Agreed the ScreenView should have a specific DBCleaner Role then we can assign the role to specific users.

Community GuidelinesBe kind and respectful, give credit to the original source of content, and search for duplicates before posting.